Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a383030303a3a2f33332d3333203d3e20323639373132.roa
File: 323830343a363862633a383030303a3a2f33332d3333203d3e20323639373132.roa (raw, json)
Hash identifier: rvsjbJOKUHG3I5mdAn2jCUPQ0zJmNOOAU5HlyXFx0SY=
Subject key identifier: 02:8D:B5:06:E7:9F:3D:4D:5E:0E:25:F7:14:D7:91:BC:75:0F:B6:8F
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 71FBFEBA5F60103B0F168EC91589EF1D69BD4C19
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a383030303a3a2f33332d3333203d3e20323639373132.roa
Signing time: Mon 24 Feb 2025 17:20:08 +0000
ROA not before: Mon 24 Feb 2025 17:15:08 +0000
ROA not after: Mon 23 Feb 2026 17:20:08 +0000
asID: 269712
IP address blocks: 2804:68bc:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:fb:fe:ba:5f:60:10:3b:0f:16:8e:c9:15:89:ef:1d:69:bd:4c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Feb 24 17:15:08 2025 GMT
Not After : Feb 23 17:20:08 2026 GMT
Subject: CN=028DB506E79F3D4D5E0E25F714D791BC750FB68F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:41:18:45:10:01:ce:a3:b3:c6:78:b2:e0:
85:e0:e2:dc:7d:2c:e5:83:1d:e4:a5:04:5e:b3:3d:
5a:b6:7c:d1:5f:4a:13:11:23:7a:4f:ce:34:95:9b:
1a:9a:09:39:6f:ee:dc:86:cd:7e:f2:cb:2b:37:37:
0e:42:67:30:46:86:75:b2:ce:60:59:20:8c:72:11:
24:ac:aa:ca:91:0b:3a:3d:fc:89:93:bf:8e:22:35:
33:e1:ae:c3:7f:e6:d4:f6:79:87:b1:5d:6d:f4:e3:
bc:4c:6a:a6:27:7a:28:88:a2:76:05:25:5b:d8:52:
7d:b2:de:1e:ca:98:09:0f:2b:f5:9d:0f:e5:ea:4e:
d1:af:f6:a2:09:1f:5e:26:89:61:81:89:73:b7:ee:
a3:8d:30:1b:89:88:24:54:9d:c6:75:6c:b4:11:1c:
8f:63:66:41:a3:f5:80:67:a7:e3:c4:32:d9:f0:ae:
af:30:e8:41:a5:eb:ec:f5:73:ba:49:06:1b:c2:07:
c9:69:b4:04:3e:6b:f7:fc:ec:ad:eb:49:d1:f4:e6:
61:64:19:17:f0:41:63:c9:c0:5c:91:85:93:06:f8:
1c:b8:71:eb:e7:00:27:4b:83:54:56:04:d5:8a:0b:
ae:59:1f:55:f0:e6:80:f2:2f:42:cd:02:cd:2c:f1:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:B5:06:E7:9F:3D:4D:5E:0E:25:F7:14:D7:91:BC:75:0F:B6:8F
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a383030303a3a2f33332d3333203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:68bc:8000::/33
Signature Algorithm: sha256WithRSAEncryption
99:9d:f5:20:2f:0d:07:7a:36:5a:66:0a:67:75:a7:6c:79:5f:
6c:7a:29:82:06:e2:59:6b:dd:5f:2a:74:57:84:9f:98:20:2d:
22:ad:fd:64:9f:4f:ef:d7:df:44:75:41:60:b8:8b:7b:68:36:
0b:6c:5f:d3:d7:5c:50:18:05:0e:d2:83:a4:ec:36:58:57:22:
47:1b:4d:53:32:eb:75:6a:94:06:1b:25:02:e2:67:29:20:4a:
74:b8:1f:12:a0:af:bd:b6:e2:13:ae:bf:41:be:43:96:2d:46:
36:a9:26:a5:c6:86:69:d7:e1:95:11:fa:75:60:9b:5f:92:c9:
85:3b:24:3e:44:43:c9:19:fd:95:dc:ec:8e:6e:98:84:5d:90:
02:fc:4b:15:b7:0c:a1:2c:1c:25:26:73:30:a1:5b:72:d9:56:
f8:90:94:20:b4:de:b6:35:18:a7:b7:83:6e:41:2e:00:54:bc:
9e:98:61:ee:c9:2e:12:10:c7:74:1a:2d:47:e5:cc:36:d9:0f:
44:d6:2f:38:52:57:2b:5a:2d:af:aa:96:28:ef:d3:3e:05:51:
3e:f0:5e:07:b5:99:27:09:00:22:99:c7:8e:b8:e8:ff:e6:59:
a9:fb:23:9a:d9:d3:8b:fa:8d:fb:01:bc:e1:ca:d2:2d:a5:85:
12:4f:43:80
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcfv+ul9gEDsPFo7JFYnvHWm9TBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF
NjBCODVBMjAeFw0yNTAyMjQxNzE1MDhaFw0yNjAyMjMxNzIwMDhaMDMxMTAvBgNV
BAMTKDAyOERCNTA2RTc5RjNENEQ1RTBFMjVGNzE0RDc5MUJDNzUwRkI2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+EEYRRABzqOzxniy4IXg4tx9
LOWDHeSlBF6zPVq2fNFfShMRI3pPzjSVmxqaCTlv7tyGzX7yyys3Nw5CZzBGhnWy
zmBZIIxyESSsqsqRCzo9/ImTv44iNTPhrsN/5tT2eYexXW3047xMaqYneiiIonYF
JVvYUn2y3h7KmAkPK/WdD+XqTtGv9qIJH14miWGBiXO37qONMBuJiCRUncZ1bLQR
HI9jZkGj9YBnp+PEMtnwrq8w6EGl6+z1c7pJBhvCB8lptAQ+a/f87K3rSdH05mFk
GRfwQWPJwFyRhZMG+By4cevnACdLg1RWBNWKC65ZH1Xw5oDyL0LNAs0s8cwBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUAo21BuefPU1eDiX3FNeRvHUPto8wHwYDVR0j
BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt
MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0
NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv
MzIzODMwMzQzYTM2Mzg2MjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEaLyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCZnfUgLw0HejZaZgpndadseV9seimCBuJZa91fKnRXhJ+YIC0irf1kn0/v
199EdUFguIt7aDYLbF/T11xQGAUO0oOk7DZYVyJHG01TMut1apQGGyUC4mcpIEp0
uB8SoK+9tuITrr9BvkOWLUY2qSalxoZp1+GVEfp1YJtfksmFOyQ+REPJGf2V3OyO
bpiEXZAC/EsVtwyhLBwlJnMwoVty2Vb4kJQgtN62NRint4NuQS4AVLyemGHuyS4S
EMd0Gi1H5cw22Q9E1i84UlcrWi2vqpYo79M+BVE+8F4HtZknCQAimceOuOj/5lmp
+yOa2dOL+o37AbzhytItpYUST0OA
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:41:23 2025 by rpki-client